shmem: convert to using splice instead of sendfile()